CSCU Module 11 Security On Social Networking Sites PDF

Security on Social Networking
Sites
Module 11
Simplifying Security.
CopyrightbyEC-Council
AllRightsReserved.ReproductionisStrictlyProhibited.
May12,2011
Cyber Scams Rife at Social Networks: Microsoft

SANFRANCISCO Socialnetworksare"lucrativehotbeds"forcyberscamsascrooksendeavortodupemembersofonlinecommunities,
accordingtoaMicrosoftsecurityreportreleasedonThursday.
"Phishing"attacksthatuseseeminglylegitimatemessagestotrickpeopleintoclickingonboobytrappedlinks,buyingbogussoftware,
orrevealinginformationrocketed1,200percentatsocialnetworkslastyear,itsaid.
"Wecontinuetoseecybercriminalsevolveattackmethodssuchasasignificantriseinsocialnetworkphishing,"Microsoftmalware
protectioncentermanagerVinnyGullottosaidintheSecurityIntelligenceReport.
Phishingusingsocialnetworkingasa"lure"represented84.5percentofallsuchtrickeryinDecemberascomparedwith8.3percentat
thestartof2010,accordingtothereport.
Microsoftanalyzeddatagatheredfrommorethan600millioncomputersystemsworldwidefromJulythroughDecemberoflastyearfor
thesemiannualstudy.
"Thepopularityofsocialnetworkingsiteshascreatednewopportunitiesforcybercriminalstonotonlydirectlyimpactusers,butalso
friends,colleaguesandfamilythroughimpersonation,"thereportsaid.
http://www.physorg.com
Scenario: Identity Theft over Social

Networking Sites
Alicewantedtoshowherfriendshowfunher
triptoBahamaswas.Sheuploadedher
photosofthetripinoneofthesocial
networkingsites.Shewasshockedwhenone
ofherfriendsshowedherawebsitethat
containedherphotosincompromised
positions.Sherealizedthatthephotosfrom
herBahamastripweremorphed.
What options has she left unchecked

while uploading the photos?
Module Objectives
Facebook:SecurityTips
SocialNetworkingSites
StayingSafeonMySpace
WhatisaProfile?
SecurityMeasures
TopSocialNetworkingSites
SocialNetworkingSecurity
Checklist
SecurityRisksInvolvedinSocial
NetworkingSites
SocialNetworkingSecurity
ChecklistforParentsand
Teachers
StayingSafeonFacebook
Module Flow
Introductionto
SocialNetworking
Sites
SocialNetworking
SecurityThreats
StayingSafe
onFacebook
StayingSafe
onMySpace
Social Networking Sites

Socialnetworkingsitesarewebbasedservicesthatallowuserstobuildonline
profiles,shareinformation,pictures,blogentries,musicclips,etc.
Thesesitesallowuserstocreatealistofotheruserswithwhomtheycanshare
information
Itallowsusertogetthemselvesinvolvedindiscussionboardsandhobbygroups
Itallowuserstoreferotherpotentialuserstobusinesses
MySpace(http://www.myspace.com)
Facebook(http://www.facebook.com)
6
What is a Profile?
Profileisacollectionofinformationthat
definesordescribesausersinterests
Themainprofilepageofauserofanysocial
networkingsiteintroducesanddescribesthe
user
Theinformationthatausermayposton
his/herprofileincludes:
FacebookProfile
Names/nicknames
Emailaddresses
Phonenumbers
Photos,videos
Personalinterests
Namesofschools,sportsteams,andfriends
http://www.sophos.com
Top Social Networking Sites

http://www.facebook.com
http://www.tagged.com
http://www.bebo.com
http://twitter.com
http://www.classmates.com
http://www.mylife.com
http://www.myspace.com
http://hi5.com
http://www.friendster.com
http://www.linkedin.com
http://www.myyearbook.com
http://www.myheritage.com
http://www.ning.com
http://www.meetup.com
http://multiply.com
http://www.ebizmba.com
Module Flow
Introductionto
SocialNetworking
Sites
SocialNetworking
SecurityThreats
StayingSafe
onFacebook
StayingSafe
onMySpace
Security Risks Involved in Social

Networking Sites
Cyberbullying
MalwareAttacks
ContactInappropriate
AdultsandBusinesses
IdentityTheft
SiteFlaws
Overexposure
PhishingScams
ObjectionableContent
ContactwithPredators
Attacks on a Social
Networking Sites
10
Cyberbullying
CyberbullyingreferstotheabuseoftechnologytoharassorthreatentheInternetusers
Theinformationpostedonsocialnetworkingsitessuchaspictures,videos,comments,
updatescanbeusedtospreadfalserumors,threatentorevealtheinformation onthe
Internet,harass/blackmailtheuser,stalkingtheuser,etc.
AccordingtoaresearchbythePewInternetProject,39% ofsocialnetworkusershadbeen
cyberbulliedinsomeway,comparedto22% ofonlineteenswhodonotusesocialnetworks
11
Identity Theft
Peopleoftengetcarriedawaywithposting
information ontosocialnetworkingsites
Leftinthehandsofcybercriminals,such
informationcanbeusedtohackintoanonline
servicessecurityquestions,leadingtoidentity
theft
Attackercanalsousetheinformationto
penetrateintothecorporatenetwork ofa
companyofhis/hertarget
Alternatively,theattackermayfindthe users
name,browsethroughhis/hersocialprofile
Hecanthenwriteanemailbasedontheusers
interestsbearingamaliciouslinkordocument
Attacker
User
Maliciousemail
12
Phishing Scams
Socialnetworkingsitescontains
usersinformation liketheemail
addresses,archivedmessages
Thisinformationcanbeusedto
customizeemailmessagesorfake
websites designedsuchthatthe
victimsdiscloseusernames,
passwords,creditcardnumbers,
etc.
IfauserclicksontheUpdate button,he/sheis
redirectedtoaFacebooklookalikephishingsite
Usersarethenaskedtoenterapasswordtocomplete
theUpdateprocedure
13
Malware Attacks
Malwareattacksarecarriedout
throughsocialengineeringasusers
aremostlymisledintoclickingon
maliciouslinks embeddedwithin
personalmessages
Malicioussoftwaregiveattackers
accesstoyourprofile andpersonal
information
Malicioussoftwaremayalsosend
messagesautomaticallytoyour
"friends"list,instructingthemto
downloadthenewapplicationtoo
Anothermethodofattackinvolvesapplications advertisedon
socialnetworkingsites,whichappeargenuine
However,someoftheseapplicationsinstallmaliciouscodeor
rogueantivirussoftware
14
Site Flaws
Therehavebeeninstanceswhensiteflawsinthesocialnetworkingsitesallowthe
informationoftheuserstobeaccessed,eventhoughtheprivacysettingsareset
Suchinformationcanincludemothersmaidenname,oftenusedasasecurityquestion
inonline andreallifesecuritychecks
Serversideflaws
Social
Networking
Sites Flaws
Crosssiterequestforgery
Crosssitescripting
15
Social Networking Threats to Minors

ObjectionableContent
Onmanysocial
networking
communities,userspost
materialthatisnot
appropriateforchildren
Thiscaninclude
obscene,racistor
violenttextandimages
Overexposure
Manycommunitypages
maycontainmaterial
thatisnotappropriate
forthechildren
Thechildmaybe
involvedinposting
picturesofhimselfor
herselforoffriendsthat
maybemisused
16
ContactwithPredators
Individualswith
intentiontoexploit
minorsmaycreate
communitypages
pretendingtobeteens
themselves
Module Flow
Introductionto
SocialNetworking
Sites
SocialNetworking
SecurityThreats
StayingSafe
onFacebook
StayingSafe
onMySpace
17
Facebook Privacy Settings

Facebookallowstheusersto
settheprivacysettingsfor:
Search
Friendrequests
Messages
FriendList
EducationandWork
CurrentcityandHometown
Likes,activitiesandother
connections
18
Facebook Privacy Settings
19
Profile Settings
SettheprofilesettingsasOnlymyfriendsBydefault,Facebookallowsallofyour
networksandallofyourfriendstobeabletoviewyourprofile
Theusersrevealpersonalinformationtopotentialidentitythievesiftheyleavethisoption
todefaultsettings
Therefore,itisadvisedtoallowyourprofiletobeviewedbyonlyfriends
20
Privacy Settings for Applications

Privacysettingsforapplicationscontrols
whatinformationsharedwithwebsites
andapps,includingsearchengines
Youcanviewyourapps,removeanyyou
don'twanttouse,orturnoffplatform
completely
EverybodyonFacebookcanreadtheuser
notes,butitisadvisabletolimitvisibility
ofnotestojustfriends
21
Settings to Block Users

Thissettingsletsyoublockpeoplefrominteractingwithyouorseeingyourinformation
onFacebook
Youcanalsospecifyfriendsyouwanttoignoreappinvitesfrom,andseealistofthe
specificappsthatyou'veblockedfromaccessingyourinformationandcontactingyou
22
Recommended Actions for Facebook

Search Settings
Option
RecommendedAction
Reason
Allowanyonetoseemy
publicsearchlisting
Becareful
TheusersshouldselecttheoptionYesonlyiftheywant
peopletheyarefamiliarwithtoknowthattheyareon
Facebook
Allowmypublicsearchlistingtobe
indexedbyexternalsearchengines
No
Ifenabled,itallowspeopleusingexternalsearchengines
likeGoogle,YahooandMSNtofindtheuseronFacebook
Seeyourpicture
Becareful
Sendyouamessage
No
Iftheusersrespondtoamessagesentbysomeonethat
theyarenotfriendswith,theunknownuserswillbeable
toviewtheusersprofile
Pokeyou
No
Byrespondingtothepokefromanunknownuser,theusers
willbeallowinghim/hertoviewtheirprofileinformation
foraperiodoftime
Addyouasafriend
Becareful
Viewyourfriendlist
No
Donotsharepicturesthatmayembarrassorthatare
personal
Becautiousbeforeacceptinganyone'sfriendrequest
Theusershouldnotallowpeoplewhoarenotyettheir
friendstoviewtheirfriendlist
23
Facebook: Security Tips

Facebook: Security Tips
1. AdjustFacebookprivacysettingstohelpprotectidentity
2. Thinkcarefullyaboutwhoisallowedtobecomeafriend
3. Show"limitedfriends"acutdownversionoftheprofile
Facebookallowsitsuserstomakepeople'limitedfriends'whoonlyhavepartial
accesstotheuserprofile
Thisisusefuliftheusershaveconnectionswhotheydonotfeelcomfortable
sharingpersonalinformationwith
4. Enableaccesstoinformationonlywhennecessary
24
Module Flow
Introductionto
SocialNetworking
Sites
SocialNetworking
SecurityThreats
StayingSafe
onFacebook
StayingSafe
onMySpace
25
Step 1: Go to Account Settings

GotoAccountSettings Privacy
DonotcheckOnlineNow ifyoudo
notwishotherstoknowwhenyou
login
CheckShowmybirthdaytomy
friends onlyifnecessary
Donotcheckfollowingoptions
underapplications:
Donotallowmyprofileinformationto
beaccessedbygamesandthirdparty
servicesIhaventconnectedtooption
Donotallowcommunicationsfrom
gamesandthirdpartyservicesI
haventconnectedto
26
Step 2: Check Settings for Comments

and Mail
GotoAccountSettings
CommentsandcheckOnly
Friendscanaddcomments
tomyblog
GotoAccountSettings
Mailandcheckonlypeople
Iknowtoreceiveemails
frompeopleyouknow
27
Step 3: Check Settings for Friends

Request and IM
GotoAccountSettings
FriendsRequest
CheckRequireCAPTCHA
[?]fromuserssuspected
ofspamming andalso
checkotheroptions
accordingtoyourchoice
GotoAccountSettings
IM
CheckOnlyMyIM
friends toappearonly
friendsintheIMlist
28
Step 4: Check Settings for Stream Settings

GotoAccountSettings Mypublishedactivitiesandchecktheproperoption
GotoAccountSettings MyFriends'Activitiesandchecktheproperoption
29
Step 5: Settings for Block Users By Age

DonotcheckAllowusersunder18tocontactme
CheckingthisoptionwouldallowallthefakeuserswhopretendtobeUnder18
accesstotheaccount
Todenyanyunauthorizedaccesstotheprofile:
BlocktheuserbyaddingtheirprofileURLtotheBlockeduserslist
30
Module Summary
Socialnetworkingsitesallowuserstobuildonlineprofiles,shareinformation,pictures,
blogentries,musicclips,etc.
Themainprofilepageofauserofasocialnetworkingsiteintroducesanddescribesthe
user
Cyberbullyingistheprocessofusingtechnologytoharassorbullysomeone
Socialnetworkingsitescontaintheusersinformationlikeemailaddresses,archived
messagesthatcanbeusedtocustomizeemailmessages,orfakewebsites
Malwareattacksarecarriedoutthroughsocialengineeringasusersaremostlymisled
intoclickingmaliciouslinksembeddedwithinpersonalmessages
Setappropriateprivacyandsecuritydefaultsandchooseacomplex/uniquepassword
fortheaccount
31
Social Networking Security Checklist

Chooseacomplex/uniquepassword fortheaccount
Readtheprivacypolicy andtermsofservice carefully
Donotpostanythingpersonal onthesocialnetworkingsite
Setappropriateprivacyandsecuritydefaults tomakeyourprofileprivate
Becarefulaboutwhatisposted ontheInternet
Becarefulinstallingthirdpartyapplications
Onlyacceptfriendrequests frompeopleyouknow
Onlysharelimitedpersonalinformation
32
Social Networking Security Checklist

Applyprivacysettingssothatonlyfriendscanviewyourprofile
information
Donotusecommonverificationsuchasyourdateofbirthoryour
mother'smaidenname
Beawareoftheintentionsofanyoneyoumeetonthesesites
Restricttheaccessofpersonalvideosonsocialnetworkingsitestofriends
Disablethecomments topreventcyberbullying
Donotclicksuspiciouslinkstopreventmaliciousattacks
Updatethecomputerwiththelatestantivirus andothersystem
securitysoftware
Neverinstallcodecswhenasitepromptsyoutodoso
33
Social Networking Security

Checklist for Parents and Teachers
Beopenwithkids;encourageandinstruct themtoseekpermissionbefore
providinganydetailsonsocialnetworkingsites
Readtheprivacypoliciesofthesitesbeforeallowingchildrentousethem
Considerkeepingthecomputerinafamilyroomratherthanthechildsbedroom
Instructchildrentoneverrespondtomessagesthataresuggestive,obscene,
belligerent,threatening,ormakethemfeeluncomfortable
Createyourownaccountonthesocialnetworkandspendsometimeonthe
network'ssitetofamiliarizewithsocialnetworkingmedia
Createacheatsheetwithyourchild'spassword,alistofhis/herapproved
friends,andrulesforhowyourchildoperates
Knowchildren'spasswords,screennames,andaccountinformation;thiswillhelp
inmonitoringtheiractivities
Instructyourchildtoaddpeopletotheir"friends"listonlyiftheyknowthemin
reallife
34

CSCU Module 11 Security On Social Networking Sites PDF

Încărcat de

Informații document

Descriere originală:

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

CSCU Module 11 Security On Social Networking Sites PDF

Încărcat de

Drepturi de autor:

Formate disponibile

Security on Social Networking

Cyber Scams Rife at Social Networks: Microsoft

Scenario: Identity Theft over Social

What options has she left unchecked

Social Networking Sites

Top Social Networking Sites

Security Risks Involved in Social

Social Networking Threats to Minors

Facebook Privacy Settings

Facebook Privacy Settings

Privacy Settings for Applications

Settings to Block Users

Recommended Actions for Facebook

Facebook: Security Tips

Step 1: Go to Account Settings

Step 2: Check Settings for Comments

Step 3: Check Settings for Friends

Step 4: Check Settings for Stream Settings

Step 5: Settings for Block Users By Age

Social Networking Security Checklist

Social Networking Security Checklist

Social Networking Security

S-ar putea să vă placă și